1 

Sertrching_PAJ>' 



1/1 v 



PATENT ABSTRACTS OF JAPAN 



(11)Publication number : 2003-173301 
(43)Date of publication of application : 20.06.2003 



(51)Int.CI. 




G06F 13/00 
G06F 15/00 
H04L 12/24 




(21)Application number 


: 2001 -373522 


(71)Applicant 


: HITACHI LTD 


(22)Date of filing: 


07.12.2001 


(72)Inventor : 


KANEDA YASUSHI 








AOKI ATSUSHI 



(54) NETWORK, SERVER AND POLICY SERVER OF STORAGE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To realize a policy system capable of easily 
performing the addition or deletion of a policy as occasion demands by reusing an 
existing interface, and also applying the policy to new equipment having a new 
equipment interface or command by a short-time development in a site as 
occasion demands. 

SOLUTION: A policy manager registers a policy kind definition in a database in the 
definition thereof, retrieves the policy kind definition in the input of a policy, and 
inspects the adaptability of the inputted policy in reference to it. A policy agent 
registers a definition of conversion rule of policy in the definition thereof, retrieves 
the conversion rule in the input of the policy, and converts the policy into a 
command train by using it. 
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£G6/B LTWt5# U ti— A*fC*V^T, itrE©# 

v> ^mzm^r^m^mm^r^-^^x^ vtu 
(Dm&\zvktt?z> z t ttmmt-rz,^ u 9— a\ 

[»**2] co*'J tJ— AiC&t^T, WIE 10 

[«*3S3] It3j<JS2<Z>*U->— 1>— /N'tciJV^T, ME 
CDti^^av>F7-r> • -f>5' 7x-X£jySLTt,> 

tsct u y— a% 

[i»*^4] i^2o#u->- y— /N*tc*j^T, mm 20 

©t8S§g^:/D h:3Jy SNMP {CJc-^Taa^^n-SWS*^ 
NMPtc.££W31fffB^-X'\©i§:5£nv> h*<©^>^U- 

k ozmz o ®z> z t # u ->— y- a% 

CDtSgi^T'D COPS-PR {CioTlS^^n-S^U 

->-1f|g^-X£JMlLT^££#iC, mriS©?->X'l/ 
-h^* cops-pr ici^^u ->-tt^-x^©ts^n 
-^F^T^TV-hT&O, WIBCD^-^^^^ 30 
buIH©^ n v > H <VH I Sfc & -5 sb -5 - £ * £ T Z> jM 
•J ->-• y— A*„ 

[W*«6] »*E2©zt?u ->-- y-A*tc*3^T, wie 
■r-s^u^— y-/N*» 

*ttffibT«fPT5J|!U >Xf ACU^T, WE© 

£liflE©$§§tf>u v > K*Jfc£*-r*#fis€Eifi LfcSfS 
1 ©tf'J ->-£i§fjE©#'J ->-x-;xx> htcBHfljf 

U StfE©5j?'J->-x— v*x> M4li«rflE©M§ 1 50 
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# ati $ nfc £ m \z&m s nx ^■ttm&.o&mjjm 
uTWE©t«»icai^-r*c. t&mmt-rztfv ->--> 

U ->-X- yi>h*e BUHTr * d £ jWSwS n-5 1 W 
EOS! 1 tI*U>'-ill»S* 
^mfE©* U ->-x-vx > h tcjH#U, MBHcDlUI^S 

Lfe^oTtfrEo^ u x—>*x > MJffiesn 

u ->-- y-zN'ttw^coaiKtcjs-rs^'j ->-©^e^E 
i ©Ji?u->-*tA^sn*:i€rt«wanT^fc«rE 

! z & & u is. n t fr x 5- - * -^ -fe - V s * W 7 1 ? t % z. £ % m 
at-rsjRu y-A% 

[«*jbi o] *v {zt&mznrzmm&xv ^ 

-*ffifflLTftiJIW-rS7t?U->— y— A*{c*3(/iT, buEcd 
#U->— y— A»4#U ->-^^X»^«^EiaibfcHfiE 

x— x#><=>gi i co*u ©tfrEco#'J y-— a*^ 
»gH^*>*m^$n-5i, BfrE©^-— if • -f>^^x— x 

#U'>-fc*&3e*tifc«rEo#u ->-^7X©*^^ii 
sq-r-sdtsr^istT-s^'j^— y-A\ 
m^mi i] af*«i o©#>jy- y— a-^^t, 

rL— y.-f >^7i-7ii^S 1 ©stf'J y-OiEO 

y* • -f >^7i-^i;^nfc*'j y-?7X©ux 
h^estrEcD^u ->- ^^xro^^sgiJI^'r^ct^iRp 
atrs^u ->-- y-A\ 

riTufcdiBoux hsifflUTUE©^ i ©#y-> 

l7-/yt-y$ffl7)T5Ci^#itn#'Jy- 

•y-/\*. 

&fflLTfWP-r-5#'J->-y-A*!C:fc^T, ltJE©Ji?'J 

^— y-yN*«^5t©*«tr©^Scic*fLT^Airffi^ffl© 
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SOU^hfiESBUfc^— ^*A*LT«*L. MS 1 

©# g ->-*iA2> stifc £ * ic&ws nt vifcflfrss© g 

$ n T H S £ # tC X 5 - * >;/ -fe - v * Hi ^3 -T -5 CI £ £ # 

«£-r*#u a, 

[»*JHi4] »*Bio#g->— y- At-is^x, Kr 
^ * fc teMi&c «fc ?>Yc L < ^©^it©^- ^ £>£^ i o 

is-r* c £ s*3r«£-r*#g y- a. 
[»*jsi 5] »^icD#g->— y- A-tcij^T, mr 

V>H*^ritl/. BUlE©fS 1 ££5 2 ©£»©**>£© 

*«f«£-rsjj?u y- a„ 
Mwesi 6] hv-zizmmzntzm 1 ©&§§ 
£« 2 cD««£Sjj?u->-*fiefflbT«!iP-r*#y-> 
— y-y\*ic*5ViT, fl&fE©#u ->—y—ntem&<DWm 

1 «*ft£IEaiLfcx-^£A^LT«'rr-5£ 
£*>tCiifrIE©^ 2 ©««©n-7>H5ijK^!j|rsJB 2 30 

©ffigficB-r^fS i ©jpu->-#A*snjfc£€rk:ff 

«SnT(r»fclfHE©« 1 ©*&£<£« LTBifiE©SSl 
©#g->-£nv>F^Jicg8ILTiiufE©lfl 1 ©«g§ 
{CjH#-r^££t>iCHtiiE®^ 2 ©*fe*ffifflUTMIH 
<r>m 1 ©*U->-£3V>K^Jtc^&LTiiufE<»^ 2 

[0 0 0 1] 

[HMOlitSaflf^ff] #fSBJ«, LAN X^y?^© 40 
£, Web -y-A^wy- /N*£, SAN, NAS ^©X M/- 

->*©frJWc|»-f£o 

[0 0 0 2] 

T^-y h9— £©#g->— fciP:frit***-5. h9— 

^©tfg fM^iSfcMLTta IETF (Internet Engi 
neering Task Force) ^lCi5t^TSii&£ttT<^-5**, 
©«»£ LTtt^OXItttf***. 
[0 0 0 3] «a<t*6*-3fc#g->- • tJ— A-, 50 
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-T h"r9 yDy- 1999*p 6 144 ^ 

— >>**£ 151 ^— v?#g fMWO&t^y h"7 — i? 

m (•y-fcfxaKwa««B) ^-fe^3.g^^ffstsim 

<!:*«fl|-rsiRfc, *y h "7-^««cr £icK^^*3C 
fcS&B****. L*> L-, #g y h "7 — * ■ 

->x^Atc*3^x«, #g y— A£«t«n-5n>fcf 
a.-^ tc«jt©*»-r?&:to^* g ->-£m;rr s n £ tc 

^©f££**Ti*-5J:-5!c:LT^.g>,, Sfc, BSfcJSCg;** 
<*3tLxT#g->-*^HLfc0, T^U^r-->3>- 

[0004] #u #u>'-asij£«t«n* 

€rK£*^fr»fis*eiB-r*SfliJT*<&. l fi©3j?U-> 

z. £ foBJtg^^, jfi g i'-olita- y* • -f >^ 
7 x—x©fflWtte £*©£<£>{;:, #^©^iC^P*g§St, 

•o/i? g ->-aau«tt tr =t -5 tc$ij^T«. c t *>t-h- 

-5„ Hewlett-Packard tt*3 ±l^a xt«f^Hn t ©Si5-C ! $)-& 
5j?g y— ;\* PolicyXpert (TM) !c*DViTtt ( #g-> 
-SI'JtC*3^Tit5gT^-5i!)f^{C^©«t^*SAL, 1 

flojffg ->-tc«#^©M©#g ->-s»j«tt^< s 
n-s^ofcLTii-s. ^cDtz®, ##g ->— tcfc^n^* 
*<trc£*»-c€r*»f^osiK»j6-r*s! (#g 

^) *fcoT^5. PolicyXpert ©#g ->— ©Jf^-^ic 

[0 0 0 5] HP OpenView PolicyXpert User's Guide, 
J 1360-900 10 (ht tp://ovweb. external, hp. com/ovnsmdps 
/pdf/j 1360-90010.pdf), Hewlett-Packard, 2001 
g ->— ©fl^-^itSfcfCOt^Tra, IETF (Internet Engin 
eering Task Force) fdiSHT r# g if ^E^Jkl £ 

[0 0 0 6] Moore, B. , Ellesson, E. , Strassner, 
J., and Westerinen, A., "Policy Framework Core Inf 
ormation Model Version 1 Specification", RFC 3060 
(http://www.ietf.org/rfc/rfc3060.txt), IETF, 2001 
^P. Moore, B. , Rafalow, L. , Ramberg, Y. , Snir, Y. , 
Strassner, J., Westerinen, A., Chadha, R. , Brunne 
r, M. , Cohen, R. , "Policy Core Information Model E 
xtensions", draft-ietf-policy-pcim-ext-05.txt (htt 
p://www. iet f . org/internet-draf ts/draf t-iet f-pol icy 
-pcim-ext-05.txt), Internet Draft, IETF, 2001 ^p. # 
g >n- V-?z>m<Dfa hajucttH 

^M^tt)©£LT COPS (Common 
Open Policy Service) 7Dh3WS5. COPS 7oh 
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UMt IETF tC&^T, O^OXW^cfc-oTJiSgSnT 

[0 0 0 7] D. Durham, ffi, The COPS (Common Open P 
olicy Service) Protocol, RFC 2748 (http://www.iet 
f.org/rfc/rfc2748. txt), IETF, 2000 F. Reichmey 
er ft&#, COPS Usage for Policy Provisioning (COPS- 
PR), RFC3084 (http://www.ietf.org/rfc/rfc3084.tx 
t), IETF, 2001 S/t, ^>D-K-r*KC!)#U 
~>— (D^WzMLTlt, PIB (Policy Information Bas 
e) Mt*3ftTtr>*. ^CD-#)J£LT, o€fOX«ttC 10 

[0 0 0 8] M. Fine ffi^, Quality of Service Polic 
y Information Base, draft-mfine-cops-pib-05.txt (h 
t tp://www. iet f. org/internet-draf ts/draf t-mf ine-cop 
s-pib-05.txt), H77h, IETF, 200 

1 *«M^Ba-rs* 2 CO^S^chbT, -f > 
9—*y h±TO QoS (Quality of Service) "r&fr*& 

S ^IE&fl5£:LTte: Differentiated Services 

(JKT DiffServ ftflSt DiffServ ftflSfc: 20 

[0 0 0 9] S. Blake ffi*. An Architecture for Dif 
ferentiated Services, RFC 2475 (http://www.ietf.or 
g/rfc/rfc2475. txt), IETF, 1998 ^. K. Nichols fife 
A Two-bit Differentiated Services Architecture 

for the Internet, RFC 2638 (http://www.ietf.orgA 
fcAfc2638.txt), IETF, 1999^. Di f f Serv BtfglC*^ 

!V h7-^7^lTS 2 CD*y h7-^ • 77V tr— 
y a >t0BT-i©/iy7 h^IfiSnSi:^, en 30 
6** l f@(D r7D-J "T^C^^— ^CO/l^^y hoDggn 
CILTV^i:#A§. fc£ IP n*rv b&3bZ>7U — 
izmisT^ZfrZoMt, IP A°^y H^Mtl^ 
© IP 7KUX, yahzijl/, S^lifOT'Dh^M^ 
TCP UDP T<&5<h^te^<Z)/tf— HSUJWf 

[00 10]»1 Wyh7-?- 7:/lHr-">a > 

SO, 0fi*)tttfnKiO3 7'JI/-moT, * 40 

DiffServ ftfl5{C*3l>Ttt, APOX7^*JH ^ 
(C*3^T«»W^P-S:*t«)T/t^r-/ HJhCD DS 7^ 
— (Dif ferentiatedServices yj—)lb) IZ^fe 

^7h$ti:«)Tt><hO©7a- (M7P- aggrega 
ted flow fc0f-50tLT*O*^. DS 7^—JUb\Z^ 
<£tlZ>{&te DSCP (Differentiated Services CodePoi 
nt) chcttftl^o A^^D-^o<^>C<htCctoT, 13. 
7 • Jl/— ^fc*HTtt, DSCP £tt£ipJjrr*C£k:<fc 50 
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CD QoS *fr£faJPt"*;ri#T££o DiffServ Wfc 
Srffiffi-T^ilt^ctoT, :7D-£:JftJ#L DSCP fcltt 
QoS^fe#0$iJPcDfcfi6COZiT • 

[0 0 11] Diffserv 5 E t (Ccfc 0 , Eth 

ernet fCj:£ LAN, IP *y Hci<fc£> WAN &£, m$fc<D 
*y bV — PfimmZntzmmz&^Tb, end-to-end 

£ CD* y b 7 - ^ \Z& V >T tt 7 P - CDm^&ft&vm 
[0 0 12] 

C^^Tt) LAN, mmmm^TZ^ WAN, Web 1t-A^> 
5 s — X • It— /tt, ^n^Mt^Xhl/-y 

[0 0 13] £<B<fc3&»*lCi5V>TH:, IS 1 iC, ?ij 

cfc^t'U — — XKfei-rJ^T* U flEfflf 
^dtd^^*ilt^t)t»e>n§. IET 
F QoSOS^tSfiFoTViSd^tt 
^d^rt*, fi£3fc<E>^U >— vX^AfC^T 

[0 0 14] ±IE<OJ:3a:8ll*JC*^Ttt, ffi 2 ic, 1 
1@C0^U bU-^m^ It-A, XM/- 

S^ttS-f^^x — X, SNMP t MIB £CD 

<**Jb-e"^ COPS-PR t PIB 

^>H7< > • -f >^^x — X (CLI), $ffe<D API ft 
[0 0 15] *%0^o^ l (DBMtt, ±EO^ 1 coPul 

s tcf nit « $>z>vim7u!f7$> ^mi§^ 
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X&£ e 
[0 0 16] 

*U i/-V-rt&&T$*<D~ru*^—ft\z^g<D&ot£ 

fc*LT#It* z. t tc ck o TmifHco^ U ~>- 
©S3ttSftft5#Uy-7^i;fT*§. « 2 CD 

[0017] iwieoss i o^a^^ffl-r^^^tCcto 

— * $$gg tC^T^ £ t #*T # -5 ck 5 \Z U £ o b fttfl 
[0 0 18] 

Sf¥i[ffllcSo»Tx— XffcU Web SrO^UTtt 

fiRM IK*»nic43^Ttt«BJBI 9:00 

MICx-5^-X(CA^T£p ^COfctb, 9:00 1 
0:00 *-CttifcW0>*y h"7-^. A, XM/-y 

feEifiL&H. SftlWcte, CKBRfflflfiJt;:, *yh7- 50 
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Z (LAN) Cl5liTttlE5R«PW^6a>h57-f 7?iCl 
o»PW:OfcaHi«ifeflE**fcAfc^. -y— Afc 

BLTI4, f-A^'jy-X0W5> 50* cDgfcfr 
#ttJ8T*S«k'3K:l/&V>. £ btC, Xhlx-v (SAN 

*5<ktf nas) JcHUTJiSK©^— 9<n**v*s>9& 

cn6*»to©#U fcLTEJfi-rscii^ck 

[0 0 19] CODSa^fc&W-*** hy-^feck^a 
g§CD«/££0 1 ZmmLTrnwrz. LAN (Local Area 
Network) 121 \ZVXi7 7<7> h HO ^BckU^^-f T 

> hnj_ jWMfcsnTv**. ^7-f7>h no 

2 7-1 7 > V Hi \t PC, a>H'\;H« • ^>hfo.- 

*&tt*MMMST*£- LAN 121 tCte LAN 7s<1 y 
^ 122 ^<jntW^, LAN 7>fyf 122 
A 131 *3cktfU— A 132 fcJgfltsnTV**. U— A 1 
31 fccfctfU— A 132 LAN 121 izmm^tlZ £ UTO 
\Z SAN (Storage Area Network) 141 Kt>JftK2*lT^ 

%o san 141 \z\zx hu—ism^ 151, xhu-ismm 

152 *<»l«Sn*t<i:t>JC, Xhly->>«« 151, X 
My->>«» 152 ^ffl^PT^X hl/-y 0>FP- 
5 153 t)gg$ntt^ 0 XM/-yO>hP-7 
153 tt LAN 121 SrJgftbfc^ac^fc*, LAN 121 l£t> 
SiK^nXlriSo LAN 121 tClfe NAS (Network At 

tachedStorage) ^gg 150 a*&Jtt$*lT^£ 0 LAN 121 
*3<krXX h 1/-^ • 3> 153 igfiX SAN 141 

U— A 112 *t LAN 121 Idg^ttSnTV^o 

[0 0 2 0] OfC, B2SffifflLT#'Jy-it-A 
112 O«^^ift0J"T^. #Ux-it-A 121 &A-V 
■ =i>bfa.-^S/c^ r 7-^X7 : —iy3 

-U#5;hU 213 ttA-H^^^±*fctt*E«± 

[0 0 2 1] ^-^ly — ^ • 3>V— )l 211 tt^-^ly — 
^^SCDA^SrSW^tt, ^fc^-^ly-^^cotHT 1 ?^^ 
ZLU?. • 3>V-)l 201 SffifflLT^'J 

dcOck-S^^ly— ^ • n>y— ;i/ 211 OAtB? 1 }^* 

«j'>— t*^* 212 icioxftiwan*. AT^nfe 

#U'>-tt3flUy-'J*yhU 213 JC«#SnstH 
X-yx>h 215 ilioT LAN 
X-f*y^ 122 (CfifflSn, +r— A • X— vx> h 216 
(CcfcoTIf— A 131 4dJ:^ 132 iCiiffl^n^o Sfc, 
Xhl/-y • X-:xx>h 217 tC<koTX h 15 
0 (Cilffl^n, ^fcA h ly-v • n> hn»7 153 £ 
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gSUTXM/-y 151, 152 izmmZtlZo CldTIt 
-A* • X-i^x> h 216 ^7M/-y'X-yx 
>h 217 sW#U5/— if— /t 121fttC&£<ZMC;ttLT* 
y by — i7 • x— vx> h 215 it— /I 121 

^K&^Ote, h*7-y* • x->?x> h 215 tt LA 
N X-f y7 121 OA-F9x7 • ^-^l^T y-ilX 
-r*fc«>, LAN X-f 121 rt{l5»uin5^?>T 

[0 0 2 2] ^o%>T, 0 3 ^fflLWl/-^ • 

n>v— ;i/ 2ii co^a® 3ot \z.~z>^Tmwrz>. 10 

SB 301 WJy-^X, #U->— 45±tf#U5/— « 
^^T^'Jy-^^^tUo^CDi^&ttRSfe^ 

•Jv'-JJXIi PolicyXpert fC*3WS# U S/— 

[0 0 2 3] ^Piffi 301 tt 3 m&yU— A 311, 321, 
331 HioTf^$nt^5, u^T, 7l/-At 20 
tt, Web ^59if^4$^T9-< > H^SiMPJUT-tn* 
niCJItfc:* Web ^-yS«3StSRl:ttfflt*7l/ 
— AlZ%fr^ 0 p77.-yU—A 311 tcta^xux 
h 312, Show tf^> 313, Delete 314, Insert 

315, f^rXh7^-^H 316 ^<tnXV^ 
<£<> ^7XUXh 312 l:tt#'Jy-i7 7X«0UXh 
^S^^n^>^, T^XMlT#'Jy-^7X^I 
RtSrt^TSSo Show 313 teSKLfctfMJ 

y-?7X0^#iJy-'7KA 321 (C^TK-T 
£fca6CD7t^>T&£. Delete tf^ > 314«SWbfc 30 
v-/7^x*g'J^T^fc*<7)#^>-e*^. Insert 
315*45^X H7>f-;PH 316 KATjLifc*** 
*t>OfcfcS L^CDtPU ->-^5X££/£"r*fc*G> 

[0 0 2 4] 4^ U > — • 7 1/-A 321 ICte^U 5>- • 
UXh 322, Show 323, Delete 324, In 

sert 325, f*Xh7^-Jl/H 326, Show assi 

gnment 327 AU<*nx^S. #11 5/— • UX 

h 322 {C«^MO/pU v-i7^XfCjR*r^#Uv-<^ 

£»<oux ha^ssn***, T^x^fflux^uy 40 
-*aiwract^T#«- show 323 «s*rl 

fc#U ->-9 7XOrt«S3RU y- • 7 331 \Z 

WrCtZ>tzlb<DiS? >T"$>Z>o Delete 4^^> 324ttS 
^Lfc^U SHU^f ^fc«)<7)3p^>T*^. Insert 
325 tt-r-^X by^-^K 326 lCA*>L/2:£i 
ffc*t>0&fc:S LV>£<Z)7l?»J ->— *^J5RT^>fc»0/P^ 
>T&£. Show assignment #5? >£4o-T tTR U ~>— jg 
ffl»*9-f 341 ^^b^(CI>b^nx, *'Jy 

—Oigffl*f« (policy targets) CDU X H£r^ST£o 
[0 0 2 5] aiU^U-A 331 iCteJgaUUXh 332, S 50 
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how tf^> 333, Delete tf^> 334, Insert 3 
35, f*Xh7>f-Jl/F 336 i^<inx^S. ffilU 

'JXh 332 fc»4*!U »jxhjj«a»sn* 

Edit 333 ttamu&#U*>-«Htftf>l*I* 

S^£fc&CO#^>X ! &<&<> Delete 334 ttg 

«Ufc#U^-«fl«*ffJ|»'r*fc«&©#^>T**. In 
sert 335 iir« h7^-Jl/F 336 iCA^J L- 

[0 0 2 6] #U ^-jfcJ8*rtfe9-f 341 fete* 

'Jy-llStUXh 342, Install*^ > 343, Remov 
e^> 334 i^<*nxi^. *U'>— jaffl***U 
Xh342 \ZtetfV->—&mm?*^W& J S> J £<D»it1fl 

x»ntf-f>*7x-x«*^sn§. $^>d, *n 

*fi««C*^Ttt#U v-X->^x>h 215, 216, 217 

n^>o *U y-lfflM'JX h 342 Kl^SSnfcjB/B 
7WSttffllXlKn^i4«X*S. 

^u->-iafflj**ouxhtt7Ru->-x->?x>h 

215, 216, 217 ^6#ijy-7*yt 214 ^gftbX 

^^1/-^ • n>y-;i/ 211 fc^Mfcfflftj^n^o 
t, ^u-^ • n>y— ;p 211 iifli^nfcrt^S:^ 

Uy-lM*UXh 342 tc3E5*T<5o 
[0 0 2 7] *^Iy-^ . 3>y— ;i, 211 icttJKJto 

[0 0 2 8] H 16 *S<fctf0 4 11 tt, 

— ^ • 3>7— ;l/ 211 $:d:i5bXAM5<f#Uy 
I^T^nb^Uy-©K^i:^S*^Ifi 

wts^, une»^u ©*#ttH 12 «p*<ams 

f t-iet f-pol icy-pcim-ext-05. txt K2pttlLTH£>. 

[0 0 2 9] El 16 ICJ4#U ->-?7X Pol icyDef ini t 
ion COzp'J '>-<^rt^^ESE$nTl^, Pol icyDef ini 
tion tPUv— (Pol icyDef ini t ion ?7XWJH 

{c.s>< $ns*u ">-aiij»4aflij»4»»as:&#u >- 

^5X©3£8S:IEiE-rSo Pol icyDef ini t ion 3^U->— 

fc*3^T^»"r^^€r7p'j'>-i7^xco^«;, 
u ^>-y- 5XKJH-r*#u ->-{c^< *n*#u 

b-5-5SSc^OUX h^lt^^n^o PolicyDefinition 
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12 tm^-rz £ t&»imzt£z>o 

[0 0 3 0] 016WJ zs—Zfem-tZfcSbO) Polic 
yDefinition #'J*>- 1601 £La6LT^£o #US>— 
'Vy^ 1602 (;ita^K<£>#U "Policies" <h^-<£> 

*'Jy-^7X PolicyDefinition £#4f;££nT^ 
Z>. tfVis—Z^Ts PolicyDefinition t4*U:>~ +r— 
A 112 fC&£^D&<^££nT^£o 
[0 0 3 1] ^U5>-^liJ 1611 te#»Jf>-^X QoS 
CD^'J #'J>— SHU 1611 <D&frm 

1612 tctt r^ M name" CD{\fi& "QoS" Tfetl«J 10 
5^fr^$nTV^ 0 -T&fe*, 412 
^TJisRUv'— «MU 411 K;feV>TJfe*T*^€r#»J 

[0 0 3 2] tf'J ->-«fliJ 1611 1613 

1614 {C43HT14, condition_variables <h l> o&fatD 
#U->— ^»C©ffi* user_class* <h(/^ 1 JBOffiKlJ: 
oTl^WJXhilTMo # U 1 
614 WJy-^7X QoS iCJSTStfUv— OUTQoS 20 

U^-mSftffibT^*, ^feto*. QoS #U~>- 
fe^fef^aptctt user_class' <h^5*^<Z>* U ~>— Xft 

[0 0 3 3] £ft*5£ 1615 fciS^Ttt, acti 

on_variab!es <h V* 5 U 3Ef&<£>{iiE£: acces 
s' 1 i^filCktjTi^Sn* U X h i LT^ 

-5. #U'>-*»fll« 1615 J4 QoS #US/-OlM^« 
K - £ * * # U L T H 

So t*&fc>%, QoS #U S'— ©ftffsaSlCtt access' <h 30 

[0 0 3 4] 04, 5, 6 C^^U £ PolicyToC 
ommands CDtf: U v—cort^^fEa!^ tltl^. PolicyTo 
Commands tPU Sn^^'J Mfl"Jtt*&^S 

«Stt#<D£»ffi£ffii£-r£. PolicyToCommands #U 

[0 0 3 5] B4tt LAN X-f ^ 121 ffliC^U > — 
S&Tfr&cfc^tcT&Jfca&O) SwitchCommands tfDS/— 

401 C0rt«*iEiBLT^* o 7p»J zs—^y? 402 iCfr4 
StlW>#U * "SwitchCommands" <h^O# U ->—^ 
^X PolicyToCommands ^£ttT^S 0 #U'>— 

i7^X PolicyToCommands &4#'J~>— y-— A 1 1 2 left 50 
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[0 0 3 6] #U->-«IiJ 411 tt#US/-dr5X QoS 
11 CO^SB 412 fctt r^gfc "name" CDI^ "QoS" T 

412 Kfcirvrtttfy ~>-giMij 411 tc^v^T^-rs 

^StfUS/— £7 5X*#< "QoS" £^3 

[0 0 3 7] #>J>— «»J 411 413 fc 

17 {£:fel*~04, pol icy_instal lation_epi logue <L\s*o 
*|0#'Jy- ^&<ZHi6£: Table <t InterfaceTable [I 
nterface], "ICC", dontCare, ACL, 1 £^"5 5 ®<£>ffi 
iCckoTifitsns U X h t S8* it S 2 
X h <h l/T^«?>. pol icy_instal 1 at ion_epi logue <£>{0l 
*4, QoS *'Jy-EWl:, -^co QoS tPU v-^JB"T 

37/ K^JCD£j£ffi£fBj£LT^£>. InterfaceTable 

QoS *U 0>BE#*f«rC&£> LAN X-r-z^CDA— 
F^x7 • t— :7;l/T&£>. InterfaceTable[Interfac 
e] tC*3V>T Interface tt QoS 3^ ij v— ^jgffl$tl-5 

T, InterfaceTable[Interface] J4 InterfaceTable <£> 
i #£)<£>S*£:tttT£. Interface 'J >~ 

aid 4iisE*anfcx— >?x>h*«stt«sjctii» 

^^:-5^^(Cj:oTfcch*6n^o "ICC" « dontCare, 
ACL, 1 tV^fll* InterfaceTable fcteflfrr-SSStS: 

L, ACL t^3«3f*«COffi (T^irXUXhS^) tt 
ooX i A*-f HcteJWU ^^i:^< l l 
^*&*ft-r^o dontCare ttt&Jjfl-r^^^ffiTtt 

[0 0 3 8] LAN 121 cott«{Cj;0, Inter fa 

ceTable <D i #^C0^*t4 i ##)<7)t&g§-f >^ "7 oi — 

fiS^AccessControlTable (7)giS^$)5t)l, Acces 
sControlTable (^)SKBi^$» ^tD-TT^irX^JPSfc 
t4 QoS ftlWaiStt-'f >^^x— X(Cigffl$n^). Acces 
sControlTable QoS U OgE^^*T$>^> LAN 
X-T v^(DJ\— h^xT • -t— 4 A*-f 

fdftJWSnsffitt InterfaceTable ©S»B*<3!)*r»tt 

[0 0 3 9] 418^*5^X^4, polic 

y_removal_pro logue <h U S^Offl^: 

Table InterfaceTabIe[Interface] , "ICC", dontCar 
e, ACL, 0 L^O 5 iCHCiotitfSft^U^ht 
$:B*i:-r^) 2 gigCD'JX htbTW, policy^remo 
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val_prologue (Offlte, QoS *U'>— H'J^iC, ^<D Qo 
*"JS/- 417 t (0-6*^^4 4 AW h^fcteifrt 

sft^fi^ i o T&*/sn?fc£o T&fr^, 

tf'Jv'— ^»Jfj£ 418 iC*5V>T« InterfaceTable <B 

[0 0 4 0] #U->— 416 tC^Tte, rule, 
initialization £ t/>5 £^<£>tf; U >— ^^COfB^r { AC 
L = list_number(ACL* , 0, 1023) } £^oi&Tts:t)*> 10 
ACLi^SSSfc^i: list_number(ACL\ 0, 1023) 

tClT^^o #'J5/— **«J6 416 CD*ftte, QoS 
*'Jy- Sr3^>K^««f *Ktc f if ACL 

list_number(ACL' , 0, 1023) t^3Bft«ktf«L 

[0 0 4 1] *U->-«»it^ 419 Kfc^Ttt, rule, 
installation_commands <h t^o U S^CCOfii 

£ Table <h AccessControl Table [ACL] , "CCIL", 1, (c 20 
ondi t ion (access' ) == deny' ? 0 : condi t ion(acces 
s') == permit' I condi t ion (access' ) == low_priorit 
y' ? 1 : condi tion (access' ) == high_pr ior i ty' ? 
2), dontCare, condi t ion (user_class' ) II 0 6 

^<£>UX h^LTt^o rule_instal lat ion_commands 
<&tttt, QoS #1) afliJIE*CDfcd&<Drnv> K5UG>£ 
J5Sffi*Ei£UTl^o AccessControlTable[ACL] tdfet/^ 
T ACL ttSj^&<Z>tt£&£:bU AccessControlTabl 
e [ACL] tt*<DffitC«fcoT»^;*n£> AccessControlTab 30 
le (D^mZ&Ztl-To 

[0 0 4 2] "CCIL" ttifrEOUXKZ>-€-tlUtT©B* 
£ AccessControlTable f;:1&$f'rr£>#iC££> £>fc>To T 

< 1/Vf HcttStt QoS 

ton5#'J accessOffifCJEXT 0, 1, Sfctt 

00*< 8 Mdte, user_class tt^/RUy 

-&**<3K QoS 3j^U '>-«fliJ(D*fr»lc:*6*>nT 40 
^n«, ^CDtf'J ^— SIR^ffit-^U >- SwitchValue 
Translation 801 bT^_ £*l£> 8 /W hcof(€: 

0 3tfU~>-^& access 0D{fi# deny' & 

6 0, permit* low_pr ior i ty' £ 1, high_pr 

i or i ty* 2 dit^o 

[0 0 4 3] 3tfU->--£»»5£ 420 l£:fc^Tte f rule, 
removal_commands <h ^5 £iffccD;tf U SS^COfif £: Ac 
cessControlTable[ACL], "CC", 0, 0 4 {HC0<fi 
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LTV^o rule_removal_commands <D$L\± 7 QoS sPUi/ 

5„ AccessControlTable[ACL] K43V>T ACL ttSBf^ 

6*3 U AccessControlTable[ACL] te-^CDfi 
{CctoTJt^^tl^ AccessControlTable OgS^^f, 
:bt". "CC" »4lfrie©UX h^n«TOSS£ Access 
ControlTable JCl&^T ^f^S S*rT. -T&fr^, 
5fe«© 1 HC 0 **MflU lA^f Hd*> 0 

[0 0 4 4] H5ttU— /I 131, 132 fcaRU 
~TZ>fz£><D ServerCommands /tf U 5>— 501 <Z)f*i^£§E 
jeixTV^o JR'J^-Ay^ 502 JCte^K^Uv'— 
£ "ServerCommands" £-€-CD^ U ^ ^ x PolicyToC 
ommands tlT^2> 0 

[0 0 4 5] #>J$/— SMU 511 tt QoS^Uv— 
T**S&j£«-r£. #U->-^IiJ511 (7)^frgp 512 

tctt r^^c " name - co«^ "QoS" T&ntfj £^5* 

tti«)tSnT^5. 512 [C£>V>T 

tt#U->— «IU 511 fc&^TfemTZ^tfV *s—t? 
"yTsZxifi "QoS" T*§<k^5^t*^Snx^S, 
[0 0 4 6] #U'>-»fl!J 511 <2)IMf£ff 513 \Z 

16 M-fc^Tte:, rule_instal lat ion_commands <hVio^& 
#©#U S^— ^SfeCDffl* CLI £ "allocate-servers *s 

%s\ condi t ion (user_class' ) , act ion (access' ) == d 
eny' ? 0% : ac t ion (access' ) == permit' I action(ac 
cess') == low_pr iori ty' ? 20% : act ion (access' ) == 

high_prior i ty' ? 50%, condi t ion (user_class' ) <h H 

2 S$©UXh^:lTt/^o rule_installation_comman 
ds <Offi«, QoS #U>— «MUIE*©fc»03V>K^J 

[o o 4 7] striacDUx h®s?o©s* cli «, 
« zi t > k &*kf&TZ> <d izmm znzzt LT^ 

^ 2 co®^ "allocate-servers Xs Xs" ti^^T 
■JXh^Stt 2 {@(7)/^^^^^t)0 allocate-servers 

-r^^^'Jv-tS: user_class ®(|l:*'Jy- Ser 
verValueTranslation 901 S^ffl Ufc*£*a*ffiJB£ft 
>&o Sfc, m 2 7 / ^ t LTttSHEJl? 'J ">-«BI 
<Dmftmzmm.T&i£*)i/-mk access (Ott** deny' 
^^)«0%', permit' Sfctt low_priori ty' ^6^2 
0%', high_priority' 50X' tV^ffi^ffifflStl 

zPU ^!8tf&S 517 f^^t^Ttt, rule_removal_ 
commands h^o&foOtfV ^gC(D{t$: CLI <h "al 
locate-servers Xs Xs", condi t ion (user_class' ), "de 
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fault" t^O SitOfilCckoTiflcSnS'J^htS: 
mmt-TZ 2 g^O'J^htl/T^. rule_removal_ 
commands (Offite, QoS #U £/— «flflB'JI*©fc«&©3-7 

[0 0 4 8] wiacom i cd u x h <Dmv](Dmm en 

X tt5 =1 "7 > H Sr^fig-T <B ICOrt^n* CI £ * & 

ocate-servers Xs *s" tt^j^TS^^rn V > K05 1 > 

allocate-servers a7>F^M$tl 

iottfe^Wo "f&to*>, IK 1 co/\°^;*^£LT 

3£3& user_class (DfMlZiR U Sy— ServerValueTranslat 
ion 901 *J|fflLfc3te**^^ton^. IB 2 CO 

"default" <h H 5X^^***1 

[0 0 4 9] it— A*cof±}£t::J:9, allocate-servers 
37> HJi-y— A 131, 132 CO CPUB#ffl&£<0«^££ 20 

"allocate-servers User 50%" <hU^3V>Rj:, 
User tl^^ft;^^.— tftC50X <0«iKS:*fcAS CI t 

[0 0 5 0] S614X hl/-v 150, 151, 152 ICtfHJ 
is—^^Mt Z>fztf)<D StorageCommands #U'>— 601 
©rt«M&C«LTV>*. #U->-M^ 602 t£*4^K 
©#'Jy- £ "StorageCommands" h-ZtDtfiJis—py 
X Pol icyToCommands t^JIS^tlTl^o 

[0 0 5 1] *U 611 *4 QoS #iJ5/—«a« 30 

-r^^^^tt-r^o #u aiy6ii o^frgp 612 

Kite r^ftr "name" CDfifia* "QoS" T&tlfcfj 
»K$ntl^o ftftHSB 612 Kfc^T 

»4#u>;— mm 611 tcfe^T^ttr^^^^u ^ 

^X£#* "QoS" j££nTV*£o 
[0 0 5 2] Sfc, tf'J *>-£|JW 611 CDftjf^gP 613 tC 

16 tCi5V*TJ4, ru 1 e_i ns ta 1 lat ion_commands t.^o^ 
#co#U S^(0{[g£: MI B, set (s toragejnib. cachin 
g. uni t, condi t ion (user_c lass* )) , set (storagejnib. c 40 
aching. strategy, act ion (access' ) == deny' | action 
(access') == permit' I ac t ion (access' ) == low_prio 
rity' ? nocache' : act ion (access' ) == high_priorit 
y' ? cache') t^o 3 m<om\Z ctoTM^W U X 
F^LTl^. rule_instal lat ion_commands coffite, Q 
oS *U^-*aUiB*<Z)fc»03V>K^jo*fiJtffiSE 

[o o 5 3] stfiHoux h&mmomm mib 

'JXh^WW SNMP -f >^7i-X{C*3ttSav> K 
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-H'^o tftW, SSS , JXhi^B2 set 
3FV>K^^fiX^n, MIB (Management Information Ba 
se) CO 2 fflO®*<7)«[^K3t$nS 0 ^n^> 2 fico s 

et □7>H:<t^Tr- x • 7 7<M+t^ 

"6, £§ 1 (0 set av>H{cJ:oT^ J r^v>^<0*t^ 
t3ftS7 7-f;W*B*Sn, IPS 2 (O set 37>HI:i 
oT+t7 S^^SriSilfc:? d<h (cache') 14*5 £ 
WcCl/^t!: (nocache') ^jf^^n^o ^ 1 CO set 
=i > F CO A° y * 9 t LTte^K# U 
(c^^^n^^^^'J ^3&user_class <OfiS(C#U 

StorageValueTranslation 1001 Srjgffl b/tJ^^r^ 
tP^fcns. £fz, % 2 CO set 37>H©/l7^^t 

3£SSt access coffin deny', permit' £fc&4 low_prior 
ity' &!~>t4 nocache' , high_pr ior i ty' fe£>te: cache' 

[0 0 5 4] #'J->-S$rfg5£ 617 K^Ttt, rule„ 
removal_commands <h £,#H(0/tf U g£$CCO{jI£: MI 
B, set (storage_mib. caching. uni t, condi t ion(user_cl 
ass')), set (storagejnib. caching, strategy, nocach 
e') t^O 3 flCDffifCckoTfllJ^^n^UX h £ LT 
^<5 0 rule_removal_commands cofiI&4, QoS Jp'Jy-S 
M'JS^Ofc^<Onv>F^J(0^ffiSrf2il!UT^-5o W 
IECOUX hco«^cO^*MIB »4, SKUXh^^S 
NMP -f >?7 3i — XtC:fctt£3V> F ££/£T£ COKO 
^WCt«bt»LW^o HI 2 *3ctUf^ 3 COS 
^4£/£T£^#n^> Fco^>yu- hTS^o Tfo 
M§ttUXh*>Stt 2 flico set 37>F«$ 
tX, MIB (Management Information Base) CD 2 i©S 

m<Dmt>mfe2nz>o cnb 2 {@<o set ^^>Fic<t 

[0 0 5 5] 07 (3fr43pU i7 vX PolicyVariable 
Definition CO/P U v— <Ort#^fEa!$tlTVi^). Polic 
yVariableDefinition fC^>< Stl^^U « 

*W*t>^zJ?U y-WiO 5§ffiOSOU^ ht^ 

[0 0 5 6] H 7 »4# U K*3Wt 0 5 Sffl<Z>fflSr*& 
feTZ>fz&<D VariableDef inition^U 701 cop^^ 
2rflHaiLT^<5. 702 (Ct4^|gco#>J 

& "VariableDef inition" i:^iJy-^7X P 
ol icyVariableDef ini t ion<h>Wf 5!£ tlTl^o 

[0 0 5 7] tfU ->—JSfliJ 7ll t4 user_class 
* U y- o 5 JlStSo tfUS'-a 

BU 7ll co^fefrgP 712 \Z\Z r^©: "name" COffl^ "user 
_class" T&n«j i^iftfr^Snt^S. "T^: 
to 712 JC43ViT»4#U^>-aH« 71 1 tC*5^ 



( 10 ) 



2003-173301 



17 



18 



TH^t^^^ij^-^i,^ "user_class" TS>£ 

[0 0 5 8] Ifcfc, #U^-«IiJ711 <D»fls» 713 
*5V*Tte, #U'>-IS value_type cDfjt^r user_clas 
s' tV^ttfcWSa^UXhtbT^^o u 
ser_c lass ^ 3 # U ^-«**«ffl-r** »J ">-«l!J 
KliSt^T, user_class CO«<hLT^'Jy- SwitchVa 
lueTranslation 801, ServerValueTranslat ion 901, St 
orageValueTranslation 1001 Ki:fcUT£8£*l£> user 
_class IfcW*5Sn5CtS»6fcUWS. 10 

[0059] 08,9,10 fcfitfU ~>— PolicyV 
alueTranslation ©sRU (Dfa&tffE&ZtlT^&o 
PolicyValueTranslation *U (C^< ins*U > 

[0060] ms tt*u^-^»*tt*flt*3j?ij >- 

SE**f^CO LAN X-f y^tCdSfc-arT^Sl-rSfcfecZ) Sw 
itchValueTranslation *>Jy- 801 Ort^£:fEi$LT 20 
l^£>. #'J~>— 802 JCttSKcOTSU zs— £ "Swi 
tchValueTranslation" <h-^CO^ U ^ PolicyVa 
lueTranslation <h^Jt^$nTV^ 0 
[0 0 6 1] 3^U mM 811 tt user_class ^<£>{il 

<D£«a5£j£*rr*. *u->— aiwn <^#gfl 812 

Ktt r^ft "name" coffin "user_class" TT&nfcfj £ 

v^*ft^^nxi^. -r&to-s, ^fra? 812 \z 

*UTB#U>"-iBll 811 tC:fe^T2Hftffi&j£«-r* 
^fiOi*^ "user_class" T»§Ct*»^LT^ 
So 30 

[0 0 6 2] #U">-«MU 811 OSbf^gP 813 \Z 

fc^Tft #U:>~^$: result (value == Sal 

es' ? 10.1.0.0/255.255.0.0 : value == Development* 

? 10.2.0.0/255.255.0.0) h^o 1 m<D{mzTZ> £ fc 
i%«3nT^S. ^"TS^^ffl^ Sales' 

T*n«^«l^©ffiSr IP 7FI/X 10.1.0.0 <t7X^7 

255.255.0.0 <Tfcto^flE3e6M n I<0 IP TFUXiVX 

Development* T^nSfiS^i^ IP 10. 
2.0.0 255.255.0.0 ("T^to^M^gRPI^ IP 40 

[0 0 6 3] B9li*'J S/— U->- BE 
/^(Cfcfc-a-T^tft-rSfc*© ServerValue 
Translation #'J >— 901 £)F*3^£iEtfiLT^£. * 
ij 902 ICte^CD^D ~>— £ "ServerValue 

Translation" L-Z:<D# U ~>— ^ Pol icyValueTrans 
lation i^f^nil^o 

[0 0 6 4] «flij 911 tt user_class S!<Dffl[ 

OSe»ftSS«T4. #U->-«I»J911 <D*fr» 912 50 



\Zl$ T^^c "name" (Bffia* "user_class" T&n&Sj t 
l^*fr^»5t$nTt^. Tttte^, 912 tC 

45^Ttt#U->-fflfliJ 911 JCt5viT*«ft*3£«-r* 
*<%t&<DM%iffi "user_class" T*£> £ i*lf 5t LTl^ 

So 

[0 0 6 5] Sfc, #U->-«MU 911 COKf^gP 913 \Z 
*3^T«, #D~>-^$t result <£>ffi£ (value == Sal 
es' ? userid (Mike, Cindy, Dick) : value == Develop 
ment' ? userid(Nancy, Bob, Bill)) t^O 1 MOife 

3&« Sales' t*ntf^M©«§ userid(Mike, Cindy, 
Dick) (^feto^lE3lE»n»cBf«T*^-lfon.-if I 
D) £U ^Jft-r^^S-ffi*^ Development' T&ntf^ 
userid(Nancy, Bob, Bill) (T&fc"5lifIfS 
aPUcBfM-rSJ.-lfO^L-U 8 ID) ^T^^i:^S?> 

[0 0 6 6] Hi 0 WJy-S»^^)I^#Uy- 
Effi*f*0DX hU—^JCfefciirT^-rsfc*© Stora 
geValueTranslation tPUS'— 1001 £)[*J^£:f2ili 

tR»J>— -'n^ 1002 l£te^fe<£>#U * "St 
orageValueTranslation" U 9 Policy 

ValueTranslation t^JltSnt^S. 

[0 0 6 7] #U5>— ^gU 1011 tt user_class m<Dm 
<D$£& : m&7£m'?Z>. #U^-*fl!jl011 <B*fr» 1012 

tcte T^^c "name" coffin "user_class" T&tUfj 

^^»M^nT^§, Tfcfc>%, 1012 

fc*^Ttt#U->-«HU 1011 Jc:*^TS«ft*3t*-r 
"user_class" TiSlt^gLT 

[0 0 6 8] */H f #U->-«IiJ 1011 Oftf^SP 1013 
£*5^Tte, 2^Uv— ^Sc resultOOffi^: (value == Sa 
les' ? SalesDB : value == Development' ? ProductD 
B)<h^-5 l fflcoffiicfseii:^*&^*nT^s. 
tt, Kift-r*^**** Sales' T*n«S«»Offl[* s 
alesDB &&tot>foftUft&&mT& : r~'S?'<—7> • 7 
r^^Sfctt^X* . tf»Jn.-A£) ill, SJ^T 
£^€rffi#s Development' Tfen^lft^Offl* Produ 

ctDB cr&to^MRajn^ttffl-ra^-^^-x • 

[0069] il 1(5, HI 6MJ>l4^f,@ 1 OCD 
*U ^f|tCctoT^8*nfc QoS #Ui>-^i 
0iJ^L5^-r. ffet)^ f LAN X-f 121, /t 13 
1, 132, 7M/-y 150, 151, 152 fC>IfflT£ £ (C 

56<D QoS #'J5>- 1101 $:^«-r^>. ^U'>-"\7^l 
102 lca^tta>#U *>— ^& "PrioritizeMarketing" £ 

[0 0 7 0] *'Jy-II'l 1111 9:00 ^6 10: 

00 ST©*^«IR*»P1<Oh^>1f^'>3>*|||«a|5 
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1112 ictt#us/-aiij mi jwa^an*^*!!**! 

9:00 10:00 T*SCt4i)|t5i 1 

t, tfvzs-mm mi 3&*awa*n*^*a.— if©^5 

(Marketing') T*§^t^$nT^ 
-So #U$"-«M 1111 <DW)ftW> 1113Ktth5 

>1f£ ~>3 >&&9cT2>Z.ti (high_priority') 
Snt^ft. £AT, Ell 2, 1 3, 1 4S«ffll/T#U-> 
— 212 ©«jEKi*U5/— "7*^^ 212 Id&tf 10 

[0 0 7 1 ] Ell 2tt#U^— 212 CD*/#0 
T$>£. #11$/— 212 te^u-^ • n>y 
211 *50S*S±ffiS«a 1211 fciJUTgfll 
U y£ttSA£7*i;*Mfra! 1212 &b&U 

^ffiinw 1212 *6Asn*is*t*i**±tt*fflWB 1 

2ii ^<h^3LT^^i/-^ • 3>y— ;i/ 2ii 

"T. ^^L/-^ • n>y— ;i, 211 ^6©B*agUtto 

[0 0 7 2] create(name, body), delete (name), get 20 
(name), ins tal 1 (name, target), remove (name, targe 
t). Z. £T name teX>5V ~ft£t>t>?$ U 9 5 
X, #U'>-*fctt*U'>— aaiJCD^WT*?), body 
te£/£T£X>5V^CD;£^T'&D, target tt#U 

c7) & ^ njespr co fc uxomwi *«#se l a ^ a*, m 

Sftt create fc«fc ORHfO£«« 5 to***-*"**. *fc 
tt delete fc«fcoTll#<Z>36«i*M|»LT^S create 

«. name # ":" £&l>£#tt#U ^— * 

£&Sfc>U 1 fflc£> ":" U<OttWJy-^7 

2*t&~$. 2M<D n : n ^<^tt^'Jy-^7X^ 

^x-XtCctoT, #U 5>-^X, *'Jy- tf'J ~> 
-JSMU<zn*rn<7)S^x>^ ^ *>fkf$. • gij|5fef* 

[0073] z.nz<Dm&<D9&m^m*'&ftTz>fr, n 40 

CT*(0«SBfc^t*KWrs. create mmzmfeZtl 
fz&fo (name) $!)OX>r^7^^ML, S'Jx- 
• U*^HU 213 (cS@-r^<h<hfc(C, i&SfCJfcUT 
jtf U ->— 7*yt*l-yx> hcDftSPx— XtC 
&3ftT£;i££*)£#.&<> delete B#tt*f jeSftfc* 
Mt)OX>f^f^^'Jy- • Utf^HJ 213 *5 

X^6IWI»-r*c:tSfet»a. get fi^ttftJESnfc 
213 A^tOfc'ntSfet^. install B3fttt» 50 
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remove B*tt» 

[0 0 7 4] Install fcttU— A*/tf U id 

ICtt*— /t*"J5/— • 3>/W9 1213 ^r^fflLTtffg 

*rtaB^atcf6siuT*>S3j?u 212 

214 KSttf*. -9— fcBfr*K3RT 

-X 1214 OffifSfcfet^iTttftUTA^^ffiBimiB 
1216 Sri:*3UTX->^x>hfCiilf**rao 
[0 0 7 5] ^fi:, Hl3S«jBLT7*>?t«»» 

1212 icistt^^iy— ^ ■ =i>y— ;p 211 ^b©S 

#<Bffl3*ft*ttlKT^ 013 (a) Kite create g 
#0>ffl«:#te£iEi*bT^*. create B#**±<i£fS 
gft 1211 ^^fcASn^t, SfXf7^ 1311 (C^o 
^T^fe(7)X>^^-7 u ^ >— * Utf^HJ 2131c 

U x>-r-^^^*#:^f[S(hbTS^-r^o #'Jy- ^ 
^x^cfclK* U->"-oSSJc:*5(/^Tttx>^>r ^>r*ft 

#u «aij<^ae^*3ViTtt^u sau 

*#*tt>»:5. fbT, 013 (a) (Dmm^mTT 

[0 0 7 6] 013 (b) fete delete S^CDjag^rffi 
£fBiliLT^£. delete S^^iffiSflgR 1211 
•3f;^bn^^, Sf7T7^ 1321 (C^^T^iB^COX 

Uy-- U#vhU 213 ^SBURfrr*. fit, 0 13 
(b) CDMS^^T-r^)o 

[0 0 7 7] 013 (c) tCte get S*<7)^S^ffi^fa 
SfiUTV^o get S*^±iSS«aRl211 ^b-Qfc^_b 
n>5(h, SfXf7^ 1331 iC^UT^iS^X>5 : -^ ^ 

U^yNU 213 *>Stfe3rrs„ X^^y 1332 

T, 013 (c) coMS^^TT^o 

[0 0 7 8] 0 13 (d) tCte install gsjtfccktf rem 
ove S*CDffl.a*te*IEJ6LTl^. install g^Sfc 
tt remove S*^±<4S«gP 1211 *^ofex.en5 
Sf^fy^ 1341 [:^^T^^wx>f^r^ 
S:, SS^)X>5 : ->i"7 : *^^i^^-<hLT, *'J'>-''J 
*yh'J 213 a>&**tL«T. OO'^T, 7f7? 13 

42(c^^t^i^cox>^^ T-^w-y—s^v >--e&-5 

OB!if^tC^SS:Sfcx.^7pU y-TSO, Pol icyDef ini 
tion *U *5cttf PolicyVariableDefinition #U 

u^— Tftattft^tcHx^y^ 1343 fc-r-r^, ^ 
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TftWi*^i:ttXry^ 1347 icT-TtTo 
[0 0 7 9] Xf7^ 1343 td*5ViT«S*^ install 
Tfc*>a> remove T'&£/^£*J/£-f install <D\i£ 
»WJ7r7^ 1344 (CTT^, remove ©tfj&^JX 
5=-^^ 1346 fcl"f-ftr. Xfy^ 1344 KliS^Ttt, 3 

/H5 1213 Srct^UT, V*^*fH»» 1212 JC^ 

7^ 1345 C*ViT*OlS*-r&to , 6 1 »S£tt 2 *f 

<fctei£lt—/l#U >- • f-^^X12H \z 10 
MIT, m 13 (d) Oll^Tt^o AaBUS/ 
- • X 1214 »4X*W©*— 

t'-^-X • "7*>^ (GDBM) (D£ot£;\yis^mZ 
^oTHIt^ui^T^^o Xf7^ 1346 fc45^T 
ttSK^^U 5y-£lt— ;t#U >— • 5*— X 121 
4 *6M»l/T, m 13 (d) <7)£t3£«£7T<5o 

[0 0 8 0] Xf7^ 1347 K*5V>Ttt, #U->-£B2 
*-rstf*l/i{C*^D, #»J'>- tfettSB 1215 feitfrt: 
LT3K#'Jy-^SStt^n. *'Jy--U* 20 
yhU 213 O^S^J:oTAbn7tx>^^ 5V 
SrS*«»J. (install Sfcttremove), X>f^f^ 
<h<hfetcT&i*mgfl 1215 ^i^LT, B*IC45^T* 

>HcjH«LT, El 13 (d) ojaas»TT*. 

[0 0 8 1] ^tC, 0 14 ytsRUS/- 
• 3>/W5 1213 coMa^JK^I^Bjr^. U— /WU 

->--zi>A'-r^ 1213 o^fr^BBttsnsi:, £-rx 

f-;y 1411 ti^^TA^^nfc^'Jy- ©*>J ^ 
^XSWje-rs. 3eBU zs—9 7 7>1fl PolicyDefinition 30 
T»n«Xr7^ 1412 tCTT^, PolicyVariableDefi 
nition T*ntfXfy^ 1 41 3 Ctt^o 
[0 0 8 2] X^y? 1412 fcfc^Ttt, A^nfctf 

(*U^—Xft name com) \Z n : type" i^iX^J 
£ttJPLT, U— /ttfU • 5"— 5^-X 1214 fdfig 

Ac<h*J£, tf'J >- SfS:£# "user_class" T&tlkTu 
ser_c lass: type" tH^*— Sr^-TS. ffljf^SP 

value_type <B«) &£9£:UT, Sftf-^it*. 
[0 0 8 3] Xf7^ 1413 KfcHTtt, A^£ttfc# 

u cD*^ai5^*5 ^Tfi^s« £n<s # u ~>- ^ ^ x 

£ WJy- name COM) fC " :condi t ion" t^o 
X^JSttillLT, It- /t*U zs— ♦ 5^-^-X 121 

*-££/£T<5o #'J "QoS"T 

£>ntf "QoS:condition" £ +— &±l$LTZ>o £ 
fc, »fP»iC*liT«t^3£*Sn*#U>/-«a condi 
tion_variable COffi* t UT, *frg|$#U:y-Sf£ 50 
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[0 0 8 4] 7.TyZ? 1414 tZcfe^Tte, A*Sn&# 

£ (#'Jy-fS name {£ " : act ion" £^53: 

^JSttJPLT, 1t-A^U ~>- • x-^-X 1214 

tL« "QoS:action" ^V^+-^«t§ 0 ftfls 
SR^*3ViTffi*^«$ns*SU action_variab 
le Offi*t0/£lxT, ■M^*#U5/-*«lcU^h©& 

[0 0 8 5] Off!:, El 15 SffiffiLT#'J->-*t» 
1215 <&4fflS3MH*»lWT*. #»J 1215 CD 

aEff^mftsnat. s^fy^ 1512 ic&^t, a 
astute u v-o^8P(ct5^Tfit^^$n^»'r-< 

— CD#U ->— ^X^fC ":condition" Sr^iDbfeX* 
^J£^— £LT1t— >— • 5*-^— X 1214 ^ 

scfca^E-ooux Mc^<£n^£?^£^x h*r*. 

^ . 3>y-;i/2ii tc^A-To 

[0 0 8 6] ^^iCX^-^y 1512 KliS^T, A^£*l 

S/-SE**K1 M :type" ^{^JP UfcX^JUt*— i IT 
+r— zs— • X 1214 SffiOSitf) U X 

[0 0 8 7] eSHCX^u/T? 1513 t*^T, A^J^tl 

X*(C":action" Sf^SPLfcX^JS:^— t tW- 
/\*7^U >— • t"— X 1214 ^SsRU ^^C^&CO 
UX hSrtO/fU, a»#U->-S**WJXM: 

*n«x5 — ^v/1r— • 3>v— ;t 211 

[0 0 8 8] Ell 7(»'Jy-X-yx/h 215, 216, 
217 <D«/3cHT&£>. ^7h7-^-X-yx/h 21 
5, It— /X • X— >?x> h 216, XM/-y«X-yi 
>h217 <0«J«tt»tU^. ^Uy-X-yx>h 21 
5, 216, 217 ltf'Jy-7^yt 212 *^<DB*S4« 

1711 fC&^TgffU 3iS*SX-yx> 
hftiJPgP 1712 l^^fcL, X-v?x>h»JPSB 1712 ^ 

'Jy-7*yt 212 ^'Jy-T^yt 212 
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[0 0 8 9] instal 1 (name, target), remove(name, ta 
rget). Z.ZL7? name tti>r>f f >f tafo^^ U y- 
5^X, *U^-*fctt#US/-aiijO*WT»0, ta 
rget ~>— jSffl*f*CD^^T$»^. X>?V5V 

So 

[0 0 9 0] Install g*CD^CHX-yx>h • # 

Offfi^i:lix-yx/h • z^U • 3>/N°-< ^ 171 
3 *«fflLT«**rtffl«a:tC*«bTA^#U'>--X 10 
— vx>h 215, 216, 217<£>rt8&7 r — XT'fcSX 
->?x>h ■ *U >- • x-^-X 1714 ICSST 

*U^— 1715 tC*5V^T#U->-$: 
X— >?x> h • #U • 5^— X 1714COtSIB^ 
t)i^^T*«bT^6«»»^aS 1718 ^^LTX 
"^i>M:I#n. #U 1715 WJy 

"^>K^jgjg|5 1716 #«fcOW:3ns. 37>KS 
Jftgfl 1716 JiWttfS^SSCfirO^^U^ 1717 (cto 20 

[0 0 9 1] -D^lzm 18 S«ffll/T*y h»7-* • X 
-yx>h 215, 1t-A'*X-yx>h 216, X h 
y«X-yx>h 217 K*tt*B#<0ffl3*8s*Bl01 
TSo i-yx>F 215, 216, 217a*#Uf>— 
* 212 ^^3tti:^S*^LT install g*<h remov 
e install remove W^cf 3 

ffiSWaP 1711 7^£^£*_Sn£<h, oxf'Xf7^ 181 
1 K&^T^K^X^^tV^X— ^x>h • tfVzs 
-T***>£3a>*W&r*. ::tl-yx>h'« 30 
U ~>-£tex->>x> hcoKjf^tc^SSr^fcAS^U > 
— PolicyToCommands ztf U & J:^ Pol icyVa 
lueTranslation tR U S^— *^nfC&fc* 0 ^feC0X> 

1812 tCTT^, ^5T&^«»^CIiXT7^ 1816 

{c-rrtTo 

[0 0 9 2] XryZ? 1812 fccfc^TttB*** install 
X$>Z>fr remove TfeS^^^JSTS. install <0« 
*WXr^7* 1813 fCTt"*, remove (D&foWZX 
TVZ? 1815 (C-TTtTo Xf^ 1813 CfcUTH, S 40 
S^'Jy- (X>TVx>f) ^X-yx>h'#Uy 
-•=I>/Vf5 1713 SftffiUTX-s;i>h«»»17 

12 \zt$^xvim?z<DizmLtti&A\z2EM-rz>. 

T, X^y? 1814 JC*3ViT-t0)«*r&Jb'& 1 *f* 

x 1714 {c*&ttLT, eii 8co^a^^7-r 

So Ts^ry? 1815 tC^TteSfetDTpU ~>— ?rX— ^ 
x> h • #U • ;r — — X 1714 ^6fJI^LT, 
El 18 <Dmm&f&TTZ>o 
[0 0 9 3] TsTV? 1816 fCfc^Ttt, #U>"- 50 
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#>J 1715 

V>K£«S»5E» 1718 ^i^LT, S*fC:feV>T}§ 

S^*lTTSo 
[0 0 9 4] ^{d, @ 1 9 ^fflLTX-yx>h • 

*u^— • 3>/w ? 1713 <©ffls^iB£Bii!/!-r*. X 

->>x>h • #U5>- • n>/Vf 5 1713 colgfr^BBte 
JfXf7? 1911 lCt5V^TA^^nfc7p'J 

^>-co^U'>-57 vx^we-rs. «ijy^7x^p 

olicyToCommands T&ntfXfy?" 1912 fcft* Po 
licyValueTranslation T^flfcfXx y Zf 1921 fcTT 

t?o 

[0 0 9 5] Xry? 1912 fcfc^Ttt, A*j2*lfc# 
U'>-©*#a^*<Sn*3fSU'>- £5X£ WJy 
— 3£$t name CDfjt) \Z " :pol icy_ini t" <h :p £: 
#JnbT, X— >>x>h • 7tfy->— • X 171 

"QoS" T&tUi "QoS: policyjn if £1^5 

»f^aB^^< £*l£#U polic 
y_ini t ial izat ion \ZttfoT&W (^j?r^$t£^CD#JJ5! 

[0 0 9 6] Xf'^ 1913 IC&^Tte, A^^n&sR 

^-x 1214 ta»-r*fc«>^2p(»T*. 

v— ^Igcname coffi) \Z n : instal lat ion" 
t^-SX^SttiJDUT, x-yx>h'*'Jy-*r 
-^^<-X 1714 JCT^U fflaiJBE#3V> HUX h^r 

ssrsisteffiffl-rs^r-sr^-rso #u 

^^C*^ "QoS" T$>nti w QoS: installation" <t 
rule_instal lat ion_commands cofiS^r <t 0 L 

S O 

[0 0 9 7] ^ 2 tSK7P'J->-©*fr»(C*<*n 
S*Uy-^7X« 'J ->-S»naie Oft) IC ":re 
moval" t^o3t^J5:ftJ)DUT, X— v?x>h-7p>J 
• 1714 (Ctf'J ->— ffi9JgiJ^aT> K 

«, tI^'J "QoS" T^ntf "QoS: removal" 

Sit, »f^gpi'^< $n§^u 

ItiSc rule_removal_commands (7)fiiS: <h 0 fz.VX, 
[0 0 9 8] 1914 ICiJUTtt, AJltStltz-tf 
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SrX->?x> h • U • 5="— *^-X 1214 lca» 

name cDfit) " : instal lat ion_prologue" t^o^C^ 1 

1714 fcaRU^-KffWMPlMift^^^HUXhftaai-r 

tlSstfU pol icy_ins t a 1 lat ion_prologue (Dfit 

Sif-^i:t^. fc£U #»J policy_inst 
allation_prologue 3^»ff »fc*< a 

[0 0 9 9] m 2 KS«#U'>— ©*#«jc*<sn 
§^'Jy-^7X« WUv-g&name ©«) \Z ":in 
stallation_epi logue" £ t^^^J^ttJP LT, X— 
>*x> h • #U • ^-5^— X 1714 fcjtfU z>— HE 

#Rf»»Mt3 v> Fuxh sa^T^Ru^/Br**— 

licy_installation_epiiogue ^fi^ci:0fcl/T, 
>--B#»*«B{t3 v > H U X h ©aft^-* if*. 
fzfzls, 3j> U pol icy_instal lat ion_epi logue 

[0 10 0] S3 KlStttfUS'— ©ftfr«lCA<*tl 
^*'Jy-^7X* U S/— aSbiamc cDffi) ":re 
moval_pro logue" t ^?3t^ ^J^rft-JP IT, X— >*x> 

h • #y->- • ^-^-x 1714 t#"js/— saiuwiw 

T*. »f^8Sic^<in*#U'>-S» policy, 

removal^pro logue Ofil* £ 0 LT, tfUv'— B'JRfcRF 

U 5/— gga pol icy_removal_pro logue 7^ftf£nIUc:^< 

[oioi] g4 ©*#«^*<*n 

^7pU->-^^X^S WJ~>- ^Sfcname <D«) K ":re 
moval_epi logue" t V>o;£^J£:ft-j)PLT, I-yi> 
h • #U->- • x-^^-X 1214 tltf'J gU^B#*§ 

"T^o ftf^«JC^<*n*# , J->-«» policy. 

removal_epi logue CD^&L DfzlsT, sRiJy- fiiJR£B# 

U ^a pol icy_removal_epi logue ^B4f^95(C^< 

[0 10 2] 1920 fc*lvrtt f A^Snfctf 

■J 5>— CD^f^SP(c^>< sns#u ->-^x£ 0#'J f> 

— ^gc name (Dffi) IC " : rule_ini f h^vJC^&l&tf 
flPLT, X— >*x>h • tf'Jv— • 5 s — ^-X 1714 
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"QoS" T&nfcf "QoS: rule_ini t rt £^5*— Sr^Jflct" 
^>o Sfc, ■ftfpa5^<*n**US/-«* rulejnit 
ialization »C»JSf <»WXR£*®ffii<Z>i*© 

uxh) ££o*?ut, aft-r-^t-rs. 

[0 10 3] Xry? 1921 C^UTH AJlZtlfztf 

^a name GDfii) tc: " : translat ion" £.^o~$C3r&\ 
£ftSPLT, X-yi>h'# , Jy-«f-^-Xl 

io 714 icflt©««ftiBiE<oux h*a»-rsR*cfieffl-r* 

^-^r^f^o fciAS, #'J v-CD«CDM*^ 2us 
er_class" T&tTte: " user_c lass : t rans lat ion" <hV^^ 

a result \z*tfeTZ>m <«<0«ifc8;KiB<& U X h) * 

[0 10 4] OfC, 02O4ffiffllT#Uy~^ 
1215 O^a^HB^ittPJ-r^. # 'J 1215 CD 

mfrtimi&zn&t, srx^y? 2011 ki^tse? 
20 > h • #u >— • ^-^^<-x 1214 jcaesnxi^ 

CDT\ A^J^n^^U v-O^Uv-^^X^JC \pol 
icy.init" t^0^^nmvrz^<D^^r-LL,TX. 
-> ? x> h • v- • f-^^-X 1214 £LKo A 
&ftfc'JX Hi*R*t*o««(|i©#*S*tt5 
'JXht^^b, -f >^^U^ 1717 ^is6fflLT^rjffi 

«, ACL = list_number(ACL' , 0, 1023) £ %t<Dlti$> 
list_number(ACL' , 0, 1023) tl^SCSrO^^ 
1717 Jc^oTfPfffib, LTAStLSSE 

30 afs^^a acl osjfflfit-r*, 

[0 10 5] O^V^T, XJ-v? 2012 (CtSV^T^U 

^nTl^tt (install g^^t) fli^'Jy- 
O/J^U is— $ "y7s^x\Z " : ins tal lat ion_prologue" 

1214 ^LN< dchJCcfcD^U >— 
E*B$»]«§ft=iv>KUXh^t>i:*, #>J^-©W» 
*<»3SStlT^*4:*(remove g*<£>£€) UStt^'J 
CD^'J 2 v7^^x\Z " :removaLprologue" 
40 ^X^JSftJnLfcfc^Sr^-tUTX-^x^h • * 
U • x-^^-X 1214 £LK CchiC^O^'J 
B'JI^B#*]«lft:=lV>KUX hSfet*^. 37>H«» 
^ 1716 ^ckWclT, txh«)fcnv>K'JX h^^a 

[0 10 6] ^O'^T, TsTvZt 2013 (C*5^T^^^ 

t>t»S. T^^-B, #U z/-MmZt\Z7.'Ty~J 201 
4 ^Hfr-T^. 2014 (C*3^T^, ^U'>-CD 

E*^*^StlTV^tir (install ^*cD<h#) tt^ 
50 R^U CD^U f>-^^X^{C ":instaliation"<hl^ 
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1214 £r>< Zifc:J;D#y$/— 
MSiJIE* 3 ^ > F U X h £ t> t «>, * U ->-<0|M»#ill 
SSni^St* (remove g*£)£^) KStttfUS/ 
— 5/— "iremoval" 
SnLfc*>CO£*— tlTX- S*x> F • #U >— • 

1214 *»<CtfcJ:0 3(I«U^-«MiJMI»3"7 
>FUXhS«)ift*. 3T>H**« 1716 ScttX/f 

£o 10 

[0 10 7] IgC, 7>ryZ? 2015 KiSt^T^'Jv— 

nt^St* (install g5KO<h#) f^WJy-© 
~>— ^7 ^X^jlz " : ins t al lat ion_epi logue" 

Sy—^-^-X 1214 CltKJzOsRUS/— gE 

fgiSnt^Stf (remove m^cot^) tt3«#U 
(£>7^ U z/—9 "^7X4=1 " : removal_epi logue" 

U y- • f-^^-X 1214 ditCctO^Uv— 

S 1716 SrckOtffLT, t)t*fc3V>HUx hS^a 

[0 10 8] iE^Xf77tt^TM^nfcn7 

[0 10 9] ^IcB 21 SttiLT3-7>K«ft8 1 
716 ©&3^MB&«Birr*. 3V>Fg»S 1716 CDIH 
ffrtiH*&3tt*£, SrTX^y:? 2111 fCiS^T, A^J 30 
£ti/ta^>FUX h^<OTMOnv>H • 
7V" MC^H^T, X^^y2112 2114 CO^g-X^ 

yy*«ff-r«. 37>FUXh«, aT>F-^>^ 

v ftniztt jest ^ * ^ **fc»<oag*s 

yZf 2112 lC*5V^T^^>yU— hOne-SrO<^o 

xfy^ 2113 ^4ov^x^3 tf-$n^5 : ->yu— h^* 

— h^U-< t?T^TC0A°^^^fCOliTX^^^ 21 14 
&m'fr~?Z>o X^y? 2114 fC^Tte, 37>K'JX 40 
F^<fr^>:/U-F3&&^£< >97V9 1717 £ 

[Olio] /^5^^©'5*^fcttn^>K<^ffiS{z:ct 
ot:tW. IS l fc, £fifcLfca-7>FaV\-F^ 

F'JX hO»«IOB*3WA- K^x7 • TO!/*** 

l*<. /cdiAtf, #U->— 417 (CcfcoT 
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InterfaceTable[Interface] *V\— F^i7 • 7^—^ 

»]C0Sm T tm$)<Dimm dontCare £&£Qtz 
U dontCare &WMTZ>. dontCare tttii£tejfrtL£:l,i 
eii^ScftT^COT, ^<£><h:fc OtC-T^o OiffcgS 2 
<Z)ggt "C" tm 2 <£>5fc*2s ACL <h££9fcU ACL 

1717 tC<toTWfiBLT-C-0«**)fc«) 
ACL ttaBfSSfcSft&toTOT, *©lt3*«t)t»6 

\zm 3 cogi "c" <hig 3 (D^mm 1 tsto^u 

l Srf >*:/'j* 1717 fc:J;oTffMrr*. -tofiS-TA 
1 ifi'r—7)V<D 4 /Vf h»{c*frJW*ns. 

t)^a^> fux b<Dmw<D^m& n cir 

tt, lffr-3Ziv>K**j5KUT^<. fc£*_fcf, /tf'J 
->-^»^fflo» 517 l:<kt)T}gSSftft37>KU 
XHc*5Vvrte 1 tf«:tt<03 , T>F**riE'r*. Tift 
ST condi t ion(user_class* ) : $t'{>9 7 } )9 1 
717 iCfcoTWAfib, "userid(Mike, Cindy, Dick)" t 
t^^J^eS<hLTx.^o ~D€\Z "default"^ > 
97V 9 1717 tctoTffit5*«, "default" CDSS 
T&<5 e :nb^oT3V> F • ^>yU-b "al 
locate-servers fcs %s n <brt?*9 ' "%$ n &otb%> 
<h, "al locate-servers userid(Mike, Cindy, Dick) de 
fault" t^53V>K*^5n§o 

[01121S3I:, W5^3?>F^ SNMP 
IZ£Z> MIB ^*^C*©37>KT6-5i*, -T?& 
^37>FUXh©iffl©g^ "SNMP" T&<5<h^ 
tt, set 3V>F^ 1 Bf^MLT^<o fc<hx. 
tt, #U'>-SSSctfflO» 617 Kck^TftjeSftJtrJ 

F^r^^KT^o ST condi tion(user_class' ) ^r^f >^ 
1717 (CjcoTfFMU "SalesDB" tl^iB^* 
X.^o U:#oT, set (s torage_mib. caching, uni t, "Sa 
lesDB") £^-5nv>F#£j5££n£>. O^tC, "noca 
che" t^SX^JSr-T >^y , J5 7 1717 {CcfcoTfFffi 
"T^^, f^ii^i^A^tl^OT, set (storage, 
mib. caching, strategy, "nocache") <hl^^"v r > F^ 
*JSR*n* 0 ddT "SalesDB" &&Zf "nocac 

he" t^^X^Jtt«SI3:3£ffl5 1718 tC*5^TX>n- 

F^nx^bigfa^n^o 

[0 113] OfficH 22 ZmmisT-f >97*)9 171 

7 <Dmm^m&m.wT2>. *r>97V9 \m omfftf 
Mt&znzt, ifxr^^ 1911 tc*3iiT»«!-rs^ 

t^texry? 1912 (c-rr<^, eftTftstsfa^y 

>^ 1921 (C-TT^, Mf&t*5<!:^l:«Xr7y 
1931 (C-r-T^, M1k<kZfitzLT~$>Z>Z:g\tXTy7 1 



29 

941 izTTfto 
[0 114] X^y7 1912 \Z$5\,*TltZm&<D&<D&?& 

mm*, -f>?7v? 1717 ^nm^zftzvvxmm 

II y$>Z>W$ x ? y : z <D£ o £%\Z 

«, x «tttiMrr«. 

[0 115] O^TXf^^ 1913 tC&^T, 

a, SRoaw* x == y T*n« x t y ©t^ti 

l, fot&^ifi: 0 tv^fltSi^-r. 

x ? y : zT^nH x CD«# 1 (D£l 
m\zte<i>?7V? 1717 SRiiWcLLTy £W 
ffiLT^O^S^A-To x <&ffi# 0 <Z)t#{Ctt 

<i>97*)9 1717 £f?»J;t>YcLLT z £f¥ffiLT 
-t-OffiSd^-To £6tC, ^KOS^ condition (x) II 
y action(x) II y •C**t#»Ctt, 

fc«»ff»JC#U v-^f& x 5 *>n* 

To fzfzls, Z. condi t ion(x) £5J;££ ac t ion (x) 
tVi5M»cfclX^b©tf<Z)ff»ttTia<OX^y^ 1941 

[0 116] T^^ry? 1921 ^*l/iT«^K<03£SfcffiS: 

1 £^5S$C, "default" T&tUS "defaul t" £1^5 
XWJt*Af. *&. ys«<0j£*# dontCare T*ft 
« dontCare t^ffiS^A-T. ^UTBl 22 ODffig* 

[0 117] Xf7^ 1931 (d*liT«S«OSBf*»: 

nterface T&ntf, ^ffiT&to^S&ggcTM >^ 7 x 

-x#fs*^r s fixa 22 ©aassisT-r*. 

[0 11 8] TsTV? 1941 iC^TteSfeOM&CD^ 
ffrS^J^TS. condi tionT&tlKXT^ 194 

2 ICTT^, action TfcftKXf^^ 1943 ICt^T 

list_number T&*U£X5^y:/ 1944 tdfftr. X 
fy^ 1942 tCtSUTte, MS^Ii^LT^^n 

[0 119] Xf7^ 1941 (£*5^TSRC0ita* condi 
tion(x) T&2>££lZl*, ^»iO^OJ:5l:LTt) 
£«>5. $T x ©it*5X?Ji]i: ": translation" 

— S?x> h • #U • X 1714 £&5gT 

^usz-aiijo^w^ftstons^u^-sik x © 

«€:XJftL&IS*£ condition(x) <D{fi<h ITMt 
£><> £ *Jicondi t ion(user_class' ) (Di&^'D^<DJi 
0\ZLT*>£&Z>. tRUv'— ^» user_class <7){B# S 



16 ) ?&m2 003-1 7. 3301 

30 

ales' t*na, -tnSr^Sc value C0ffit*.&"T. * 
U->-X»t«OJ* 813 K<fcoT&»l#tt;W£«Sft 
CT&to^ LAN 7.-1 121 CDtfifc^) Idte, 
^j&^ffi value == Sales' ? 10.1.0.0/255.255.0.0 : 
value == Development' ? 10.2.0.0/255.255.0.0 \Z& 
ViT^Sfc value £ Sales' <h®^LTf¥ffiT£o Sale 
s' == Sales' tt«fi:<Z)Tffffi«*tt 10.1.0.0/255.25 
5.0.0 T&fr^ IP 10.1.0.0 £^X^ 255.2 

55.0.0 Sro&tffc 8 /Vf h<Bffit;:&£o 
10 [0 1 2 0] X^ry? 1941 tC^T^KGDiW 

action(x) £g\Z\$ 9 U 5>-giSiJCD 

»f^ffitC*<Sn*#U->-^» x COffi^r^O^S ac 
tion(x) <2{B£UT^fflT£o 

[0 12 1] SKCOSC^ condi t ion (user_cl 

ass') user_class U v'—lgffeOffi 

^ffflLTjd^to fcfcU user_class a^#'Jy 

ffi^ffilxfe^CtSrfeSte-rwacfett (dontCare) £ 

*>A-r. ^bxgi 22 co^aa^^TT^o 

20 [0 12 2] Xry? 1943 {C*5V>T«, fH$C<Z>3l$t£ 
[0 12 3] Xry? 1944 KiSHTtt, ^McOill&J: 

<6fc i SJinffu *ois**r. ^ i 9UWctr-r« 
^tfzntzm&&tz&$Ei>t£^ti$\*, m 2 ^i^ccofia 
*tn\z 1 sspffbfc«*» 1 gi*©x*ja 

30 ffi^d^T^^^^^X^-^^Hr-v^^LT^^ 
^ . n>y-;U 211{Cj@imT'5. ^cch^_«, 1 is t_n 
umber (ACL' , 0, 1023) M$t<ktffc L rfmV) \Z , 

-tfs:t>t>mw^u is-mm<D&m<Dmz&tfrztsnrz 

i*fc»4, JttLT 0 WAStlS. fix, #u-> 
— MmcD&Wk&tzmz list_number(ACL',0, 1023) ifl 
<kZtfz2tLZ>£, t<D-DE 1 *MJ|Cbfc«-ra:*>'6 1. 
2, ••■ SA^tc ^"CDfiS^ 1023 (Cit-rS(h, X^- 

3iA-H^x7 • r— ^M-fX* 1024 T^^Ct 
40 Sfi^LT^SOT, 3iA-^x7'f-yMt 

[0 12 4] *HJg09tC*5^T«, O.— tftt^U— ^ 
• zi>y— Jl/ 211 ^ifflLT Policies #U 1601 
<h LKVariableDefinition #U*>— 701 ^^'J->— v 
^^-^ 212 (CgS^t"^. £tz, SwitchCommands *»J-> 
— 401 t SwitchValueTranslation 7^U*>— 801 ch^ 
*y bV — i7 • X— vx> h 215 iCgH^JL, ServerCom 
mands #Ui>— 501 <h ServerValueTrans lat ion 
>— 901 tSrit— /I • X— yx>h 216 (CgH^aL, St 
50 orageCommands ^'Jy- 601 t. StorageValueTrans lat 
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ion #U~>- 1001 t&X hU — zs • X— >>x> h 217 

LAN 121, it— A* 131, 132, Xhl/-y 150, 151, 152 
tefflffl-TZOMZtztz 1 flicOzPUv— Priori tizeMarke 
tingllOl ^ga^-r^fc^TTtfo "T^^, Prioritiz 
eMarketing 1101 £ LAN X-f y^ 1 121, it— A* 131, 1 
32 tXhlz-y 151, 152 Sfctt Xhl/-y 150{Cffi 

[0 12 6] PrioritizeMarketing 1101 OE^tCj: 
0, 9:00 10:00 £T LAN JC*5ViTttBK5ESRF1^ 

A, It— /tJCWL/Tttl*— /tO#Uy— 5 
0% ©a^flSfflT^Sck'SJcU, XM/-yi:|lT 

^> 0 &fz, ^'J v'— CO^JE^ PrioritizeMarketing 110 20 

[0 12 7] *IQfi«lc45ViTtt f fcSfc&«««:fc'l> 
stfU v'— S3£H"rsiCtt, *Sfc^SPolicyDefinition 
stfUv'— h, t&^fcZ PolicyVariableDef inition tfcU 
y-4iEIl/T^Uy-^i;t 212 (CSE^U <g>£ 

PolicyToCommands #■»— t, £^fc£> PolicyV 
alueTranslation # »J ~>— £ IT^ y h*7 — 9 • 
X— S?x>h 215, it— A* • X— >?x> h 216 *5cfctf 
Xhl/-y-X-yx>h 217 fC^TtUScfc ^ Q d 
tl6©#U v-<£>!Hi£ • *H^ttii*©*U ->-»£fe-f 30 

[0128] *fc t *»^iannsnft:t€rfcj4, 

^ — ^7 . x— vx> h 215, it— A • X— vx> h 216 
SfcttX hU-y • X-yx> h 217 (£>ftiS£:P < 
£££7pU;y--tr-A 112 fcS^U 
&X— :xx> Ml PolicyToCommands #»J:>— P 
olicyValueTranslation # U >— SK^TJlWfJ: d 

nK<tt>TfiiDsnfc«»^»UTfciiSF<o#u 40 
*a»ciBffl-r *^t**Tf**fc» f *%0j^^ 2 cog 

[0129] &±^&*<Dmnm<DWiw&i5t>2>. 

[0 13 0] [O^^U^^cDxtcOAWm 1 \Z, m 
^fect^list.number .^©H*©fh»S4$ulttoT^ 



JtiJiC&^T IP ft*Ty M:S^t§^f DSCP (Diffser 
v Code Point) <£>{fi 46 *^US/-^» DSCP iCcfc^T 
*B^*nTViS*«nT>K(C*5ViTtt T0S (Type Of Se 
rvice) cofi 264 £jf£T£ 21 4 * DS 

CP t^5as«fflt5 u t l:<kot>r >^/U i'l:* 
4 t DSCP <b£»T, £ft£ T0S 

[0 13 1] [list.number USSclCcfc^ CLI col&ffllg 
2 H, WIHcoa*(D*jSg^J(C*5^T« list_number M 

8&Kttffl3tlTVifc*t f list_number MffcttCLI tC*5tt 
K^HScfltcottH^tftfi^fca&tcittfflr S E 1 1> 
fc<hx.« PolicyToCommands ^ »J :>— (C^V^T 
Cisco 1±C0;i/— 5?(Dfzth<D access-list 3V>F§4 
fiJcT^^fe^, access-list 3 v> KcogW<&3l8ScttS 

S^^l/— 5V >y /XfA I0S lC*5^Tj»c« 

V>o & J£?S IP y^-trXDX hco#-^tt 2300 

^5 2699 "CttttftHttSft^. iKZHS&K list_num 
ber(ACL', 2300, 2699) tV^Hft-t^bSffiffl-r* 

[0 13 2] te8Stlfc#U'>-?7X0 GUI ^Oii 

• n>y-;u 211 ^^^^x>-t--< ^^coiiJD^ffl^ 
«^^aifc^-^i/— ^ • n>y— )i 211 ^^'jy-v 
^^■^r 212 ^(D^^^ofrtt^mfTZtlT^fc. 
^(Dfz®, PolicyDef inition # U S>— U S^— 
>^ 212 tlSE*$n^r<h{ClJ:oTfe^fc^:^U->— 

312 tC^^^n^^ofc. *'Jy-^7X' UX h 
312 ©«*S#»J ->— V^v-^ 212 iz&^xfemzn 

y-i77XWJy-V*yt 212 Hi5^T^Sfc 

11 jcaifli-rso^^x— xsigjp-rntfckti. 

Pol icyDef ini t ion # U >— a^^v-^fWPgR 12 

12 fr*3ViT^«Sfc«B"J^$nfet#, fa:*)*^^ 

1345 43^?>' 1346 ^it^iC^V^T, ±ffig«aS 1 
211 ^^^UT^l/-^ • 3>y— ;U 211 fC create 
d(name) deleted (name) <h 5jgiftl£:£5 d^x. 

«cfcV^ 0 ^CT created &£Zf deleted ^ilftico*^ 
T*0, name tt^«*fcttgiJ|»Snfc* U >— i7 

• n>y— ;i/ 211 ^cn^coia 
to&ottt^tztglzmWi&tfV i>-^^x^^#'j > 

-^7^X • UXh 312 »CiiftlSfctt#U ^—9 • 

uxh3i2 a>sm»-rn«cfc^. 
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[0 13 3] CflDJz'SfctfUS'— 212 

• =3 >V— JI^ 211 J^^^X>T L ^T-^iiJ[jp • HU 

[0 13 4] [GUI ±TO«X*ft3H» 4 C, buIHOS 
*^HS6^Jfc43ViTtt*^U— ^ • 3>y— ;t 211 ^ 

5— tt, #'Jy-7^^t 212 K^TlftttlSftT* 

^i/— ^ • n>y— ;i/ 211 jciia^nT^fco 

U A^tlfcX^^-TV V^v-v 212 

£r<fc£££a*T^5. ^ • 3>y — A 211 K 

[0 13 5] *«C38f«X*Sn3ti:aK:»a is_va 

1 id_vari able (c las s_name, condi t ion_or_ac t ion, vari 
able_name) (ht^MS'f >^ V :n — X l^T^^ 

^ • n>y-;p 211 ^WJy-v*y> 212 
L^$>t>"&&$$Zt£0. ZLZLT" class_name \Z^&(Dtf 
•J £7^X*T&9, condi tion_or_act ion te^fe^gR 
^ftf^aP^<hV^<^o^^^^>L, variable_name tt 
S»'Jy«TS5. #U->-T*S>* 212 30 

1214 ^ilT38«^U y-^WH^^nfe^fr 

Sr^u— ^ • n>y— ;p 211 tca^T. 

3r^v—9 • n>y— )V 211 tex^— 

[0 13 6] [COPS-PR Cctl)3V>Filffli 5 

>h 215 CfeUT LAN X-f 212 ©A-H9x7 

* h I 7-*««tt3^>F7>r> • -f >*7x-X, ^ 
a hnjp SNMP [CcfcoTiS^T^^ MIB, yn hn;U 
COPS-PR iCctoTiftS-T^^^ PIB (Policy Informat 
ion Base) StW>?7x-XSt)oTM. 

vx> HCiS^Tdn^tfM >^:7x — X£<£fflT£ C 
<h^T#>5o COPS-PR ^/ET^fcf&^fCte, SNMP (C 
&tt£> set 3"^>HO^^0(C decision (install/re 
move) nv>HSffiffifntfck^c 
[0 13 7] [XML <Z>{£ffl]?f§ 6 K. Hiff2^S*C7)^Sg 50 



Wc&^Tte^U y-*A*n^>^7x-X« GUI 
tztttc-Dtcrf, #U Zs—\tl<Dfctb\Z XML Sr^/Hf* 

-r^toft, #u 1212 

->-S:±teS«» 1211 *5AW5*b0l:#U^ 
SfSiELfc XML f+Xh & XML /1-1f Sr<h*5 LTA^ 

olicyDefinition aSUi^— 1601 ^^^cOcko^: XML 

5^X hiLTK*t"S£<fc;d*TSa. 

<policy> 

<name>Po 1 i c i es</name> 
<class>Pol icyDef ini tion</class> 
<condi t ions> 

<cond i t i onXvar i ab 1 e>name</var i ab 1 e><va 1 ue>QoS</va 

lueX/condi tion> 

</condi t ions> 

<act ions> 

<action> 

<variable>condi t ion_var iables</variable> 

<valueXl is tXelement>user_class</element></l is t>< 

/value> 

</action> 

<act ion> 

<va r i ab 1 e>ac t i on_va r i ab 1 e s</va r i ab 1 e> 

<valueXl istXelement>access</element></l is tX/val 

ue> 

</action> 
</ac t ions> 
</pol icy> 

<policy>---</policy> \t (DW^iJy 
-TS)^> £ h&$> z>t}~T& if~£$) 0 , <name>—</name> 

0, <class>-</class> tt WJy-^7Xt* 
<£> d t * & 6;bT^ t7~C$)Z>. <condi t ions>—</condi t 
ions> tt ***f^gPT**c:^S:*6to-r^^T* 
0, <condition>--</condition> tt 1 1@<£>^ 

#T&££<h£&S;b^yT&D, <variable>— </va 
riable> tt ^g»*T**rt**6WyT 
*0, <value>-</value> tt a^SfccoffiTSS £ 
tSfe&bt^^T'feS. <actions>— </actions> tt " 
^tSfpaPTaSdi^feSfc-r^^TfeO, <actio 
n>— </action> tt ^ 1 m<DW]^&^Z. h^:$> 
t>t)T?tfT-$>K), <list>-</list> UiKoi^UX 
hTag>-5 CI <h^ab e^T^^T* 0 , <element>--</ele 
ment> \* n #MS&'J X h<&fi*T»*d£**Sfo 

[0 13 8] ±IB<7) XML 5^X ht4ffi*0#U S 
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O^^fflfSiltfettS. ttx.H PolicyDefin 
i t ion tfMJ 5>— 1601 S^^OioJi XML f+Xhi 

<pol icy> 

<name>Pol icies</name> 
<c 1 ass>Po 1 i cyDe f i n i t i on</c 1 as s> 
<pol icyname>QoS</pol icyname> 

<condi t ion_variables><var iable>user_class</var iabl 10 
e></cond i t i on_var i ab 1 es> 

<ac t i on_var i ab 1 esXvar i ab 1 e>access</var i ab 1 e></ac t 
ion_var iables> 
</pol icy> 

CldT <pol icyname>--</pol icyname> #*AEiit 
T^^tfU v—^T^^^ch^rfe^^b, Condition 
_variables>---</condition_variables> 
SP«C*6*5n*X»©UXhT**iltSr*6toU > <a 
c t ion_variables>*--</act ion_var iables> fri WW) 

[0 13 9] 
[0®cDfffiiji&t£i3J] 

[HI] «»JC^^*7h9-^«|T*^) 0 30 
[02] Hl»dfiW*#"JS/— tJ— /X H2 ©ifiS0T 

[03] H2^45W**^U-^ • 3>v— ;u 211 co 
GUI ©K«8T**. 

[04] *'Jy-1t-A'll2 CA^n#U'>- Swit 
chCommands CDl#0J0T&£>o 

[0 5] #U*>- -tf- A 112 l:AM^#'Jy- Serv 
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erCommands <£>IK^0T$>£o 

[0 6] aS'JS/— -fr-A 112 (CA^-r^#U->- Stor 
ageCommands OiK^0T$>-5 o 

[0 7] #Uv-it-A* H2 fcX*"r*#U->— Vari 
ableDef inition GDl#BJ0T& ; I>o 

[0 8] tEDS/— fr— ;t 112 »CA*-r*#U $/— Swit 
chValueTranslation <Z>iftBJ0T&^>o 

[0 9] 3^U->— y*— A* U2 fCA^-r^^Uv- Serv 
erValueTranslation C9l#BJ0T&£o 

[010] ^'Jy- 9— A 112 fcA^jf £^Uv- St 
orageValueTranslation (Dlft0J0T$>^o 

[an] *u ~>-u--a in tcA^-rs^u Pr 

ioritizeMarketing (Dt£H^E|-e$>£o 
[0 12] @2MW*Uy-nyt 212 

[013] 012 (DtSU V^i^-f 212 

[014] gl2^'Jy-ny> 212 fcj3fr£-ff 

-a^u ~>- • 3>a-y 5 i2i3^a^u-ittW0T 

[015] 012 (7)#U v— ~?*z?* IVl £*5W-£# 

■j 1215 ©Aaa7P-BiMHT»-&. 

[016] #'Jy-!t-All2 l:AW§3K'Jy- Po 
licies HUH ©ia^0t*S. 

[017] 02 H^^Uy-X-yx>h 215, 2 
16, 217 <O*fi!t0-r**. 
[0 18] 0 17 ©jRUS/— X— >?ai>h HOI ©ffll 

[019] 0 17 <£>#U *>— X— >?x> b 1701 fC&tt 
§X-yx/h ■ #U'>- ■ n>A-r^ 1713 CDj&g? 

[0 2 0] 0 17 O^U zs— X— >>x> h 1701 td&tt 
*#'J 1715 (Z)«ia7P-BlMBIT*S. 

[02 1] 0 17 c^^ij$/-x->?x>h 1701 tC&tt 
*3V>F£ifcaJ 1716 D-iftBJ0T&<5o 

[0 2 2] 0 17 OTtJ^U X— 5?x> h 1701 IC&tt 
*-f >^7'J* 1717 COjaS^P-ittM0TS^)o 



[08] 



[09] 



8 



801 



rMK-^ftYduVr^ 



\ then 

I result = 



value == 'Sales' 7 
10.1.0.Q7255.255.O.O ! j 
: value = 'Development' ^^13 ! 
10.2 0.0/^5 255.0,0. _ J ! 



V 



811 



end"" 



B 9 



| ^r^^n^a*^iOTsla^on\ fa 1 — " >902 ! 

1^912 



rf ; name 
j then 

| \ result = " value~== •Sates'"?" ~ 
1 ! UsertDffMike', "Cindy*, 'Dfck*D 

! ' : value = 'Development' ? 

\ I UasrJPffNana: JBobVflirn. . 

I end if; 
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[02] 
132 



Policy Server 



112 



150 



Storage 





LAN 




Switch 



141 / 



112 



Policy 
Server 



211 



Operator 
Console 



ys/ 212 ^ 2 1 * 



Policy 
Manager 




153 



215 s 



Storage 
Controller 



152 



Storage 



Storage 




332 



315 313 316 314 325 323 326 324 335 333 336 334 

,341 



Policy targets 



,342 

-6 



\ V 

343 344 



Network 
Agent 



Policy 
Repository 



y216\ / 



Server 
Agent 



217 



Storage 
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417 



418 



-416 



policy AvtftPtJCOTinPi^4 ^S'if?!^????^ !?: 

.policy instaMonJepilogue = 
! (Table, 

• p n terfaceTabie[ Interface], 
L . - "JCCT , doniCAfe,ACiu _ 
JpbIicy__rernovaJ_j)i doguo — 
! [Table, 

! [lnterfac»TaJbte[1nte/face] r 

i^lfnTtTaiization - ] 
I. _0*Q_L_?ll$X^^ 
jru \&2) nstaUalibn_ corn mands = 
! Pabte. 

S [AccessControlTableJACL], 
! •CCIL". 



conditior^ acceBS ) « 'deny ? 0 
: condition ('access') == 'permit* | 
ccnditkin ('access') == 'tow _pnonV 7 1 
: conditionfaccess') == h!gh_pnorfty' ? 2, 
dontCare. 

.cpj^WPQC^erjtos'} y 0fl u 

l^loIrernweQ c6™handa~= 
;; rjAccessContnarTable[ACL]. 

_"C_c;^_oi__ _ 

endft 
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[0 6] 



501 



- >fMffAra.K^V~ ,5i3 
«»o „; . . ... ...... .^C.. - 

• |nile Jnaia] fe6(^c6m man 3 3 = " 

tcu, 

["altocata-servere %s %8", 
condition('Liser_ciass'), 
actl on(" access') 'deny* ? 0% 
: action ('access*) = 'permit 1 1 
actio n faeces s') = *low_pnority' ? 20% 
: actionfaocess') = 'highj»riorlt/ ? 50%,; 

- cpnditiqnJ < tBer_ctas^Lli9Jl. - 
J ^lejremwaT_connrnands = 
[CLI. 

fallocate-servers %s %s m , 
condition ('user^ciass'), 

._1djftw«5L 

end 
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! [MIB, 




! 6etCstorage_mib.caching.unit, 




S contftionfuser.ciass')), 




I set(storage_mib. caching strategy, 




j action ('access') = 'deny | 




\ : acrjon('acces8 ) == "pormif | 




; actionfaccess') == 'low_prion*ty* ? 'nocache' . 


! _. action^' access'^ == lrtiqh_prjc 


idtV? 'cat^e'Jl;! 


^ule_rernova>_cornniands = 


^616 


! [MIB, 




S set<storag©_mlb.caching.unil, 


""617 


conditio nCuaer^class')), 


2 set(storage_mib.caching.Gtratogy, 
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J j^<^V>~nWe^ [sj — " 
T if [ name y^u&&j3aBsT~ 
; then 

IJSDdifc. 
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i ifinarjne. 

■ then 

end 
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1001 



1002 

[policy Storage Valuef ransJatlon : PolicyValuaTranstatlon Ts^ 

c m t a = a n-B una ==sbbsbsb o£Jonflnn = = ess 3D ~ 

i if !rwme~= r usirLclass' '"K ! ^ irvvi 

!m*r ™! 0 _ 11 JX 1003 

(result - = " value < _ales r 7 r^i 

SaJeaDB) : :^10i2 

: value == 'Development' ? 

Produ^DB) 

Jend'rfT * 
end 
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i i_poHcy Pr^fee^a rketJ np : OpS_ i§ / 




! r~- pT-A VO^r.VO^\V-- V-J^- Vv~Ti."-n. 

; if i time = time_rango(9:00, 10:00), » 


K" 


• [ • user class = 'Marketing' |^ 
| Itten-"- — 


1 1 ! access = ^h_prtority : *^""M113 
! i end if; 




i end 
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variable names 
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Check action variable 
names 




End 
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1215 ; rpoficx po l,: p^ ] FpLtey^lo 1 !^! --------- 



then 
r, s • z z, z 




; Jccj^jlw^variables f lyser^dassj^ 
emf i?; s ztl ------- 

iend 



( 23 ) 



%?m2 003-17330 



[017] 



17 



Policy Agent 



✓1701 



1711 



Mid Layer 
Receiver 



1714 



Agent 
PoBcy 
JUitabase, 



1713 



Agent 

r-~ | Policy 
Compiler 



1712 



Agent 
Controller 



Interpreter 



1717 



Command 
Translator 

— 



Device 
Policy 
Database, 



Policy 
Translator 



1718 ! 



1716 



Device 
Commander 




1812 



install 




Translate policies by 
Policy Translator 



Translate poDcy using 
Agent Policy Compiler 



"1815 



1814 



Remove policy from 
Agent Policy DB 



Enter policy into Agent 
Policy DB 



1817 



Set commands thru 
Device Commander 






r 

^-^1912 


Get poBcy initializer list 
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For all rules in policy: 
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